Several Bugfixes

* fix: missing php-fpm vhost-files
* fix: htaccess password protection
* fix: access for awstats